What I read is they hacked wallets that had the 'Milk Sad' vulnerability (predictable private key), but I'm skeptical as that's an old CVE, IMHO it's more likely an infrastructure or communications hack or a wrench attack - the suspect is now 'missing'.
Of course it is, OTOH the nature of this 'enterprise' has been visible for quite a while now, and I'm sure, investigated quite intensively (by more than DoJ), and 'missing' only means that the general public doesn't know where he is.
This is simply not true. BTW I was a bitcoin core developer for many years, and am one of the few people who have actually changed bitcoin’s consensus rules.
If a quorum of miners decide to run hard fork changes, then they just disappear from the network once the changes trigger. No miner can force a user to change their consensus rules.
A soft fork is different. But increasing the bitcoin issuance can never be a soft fork.